Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/175b44dd-3faf-3494-80ee-53ab27e063f5.roa
File:                     175b44dd-3faf-3494-80ee-53ab27e063f5.roa (raw, json)
Hash identifier:          lnm4R7XmDrkXqH4zAV7b0+gceYhvi4RG+derP/0Cs1U=
Subject key identifier:   69:97:E9:8F:2D:3B:BE:FD:52:82:01:D7:93:B2:28:20:DA:75:E2:83
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F432858483B4FF78F5BABDD4888BE6D00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/175b44dd-3faf-3494-80ee-53ab27e063f5.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     30058
IP address blocks:        50.7.112.0/24 maxlen: 24
                          50.7.114.0/24 maxlen: 24
                          50.7.152.0/22 maxlen: 22
                          50.7.198.0/23 maxlen: 23
                          50.7.202.0/23 maxlen: 23
                          50.7.212.0/23 maxlen: 24
                          50.7.224.0/23 maxlen: 23
                          50.7.226.0/23 maxlen: 23
                          66.90.119.0/24 maxlen: 24
                          198.16.98.0/24 maxlen: 24
                          198.16.102.0/23 maxlen: 23
                          198.16.104.0/23 maxlen: 23
                          198.16.122.0/24 maxlen: 24
                          2001:49f0:d007::/48 maxlen: 48
                          2001:49f0:d0a3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:4f:f7:8f:5b:ab:dd:48:88:be:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=fb754d4d-20b8-49bb-9117-ace622ba12a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:fd:39:1d:cc:cd:41:4a:5e:0e:b1:39:c2:
                    28:d6:eb:e4:51:85:4b:0c:af:06:b1:ed:2a:a1:58:
                    83:a6:9a:cf:13:d5:06:d9:f2:84:9b:1a:5d:e0:8c:
                    be:8f:71:71:b9:65:2e:13:06:00:2b:75:af:6c:88:
                    d7:72:00:5a:25:9a:48:6d:8c:e3:27:7a:7b:8e:95:
                    e2:c8:be:7a:d8:17:4f:5f:9c:98:53:66:27:d3:56:
                    13:96:35:d3:6d:53:b0:de:07:ad:b8:c8:68:c1:be:
                    71:01:b7:a4:1f:db:c5:ab:4a:5b:49:33:fb:0b:4e:
                    24:2c:47:87:51:95:ec:c9:6c:fe:3a:30:02:1a:4b:
                    65:85:7b:ca:40:71:55:ac:5b:b3:1f:6c:cb:d6:e3:
                    a1:6a:c6:a7:1b:3b:73:c0:2e:14:e2:62:bb:46:70:
                    ba:90:91:35:15:69:6b:22:a7:0f:ad:fd:b0:27:fc:
                    fb:69:1b:0b:d3:80:3f:f8:75:6d:94:6d:96:c6:66:
                    89:a2:f6:51:9e:6b:53:16:25:14:58:ed:dc:13:f7:
                    a6:b3:5e:2a:ec:cc:23:e0:dd:8f:18:18:98:1e:63:
                    77:b8:55:a2:30:9e:9b:e6:e5:e8:80:eb:01:ea:14:
                    1c:ff:05:fe:7b:a1:77:16:e1:44:d8:b9:e3:72:27:
                    2f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:97:E9:8F:2D:3B:BE:FD:52:82:01:D7:93:B2:28:20:DA:75:E2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/175b44dd-3faf-3494-80ee-53ab27e063f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.7.112.0/24
                  50.7.114.0/24
                  50.7.152.0/22
                  50.7.198.0/23
                  50.7.202.0/23
                  50.7.212.0/23
                  50.7.224.0/22
                  66.90.119.0/24
                  198.16.98.0/24
                  198.16.102.0-198.16.105.255
                  198.16.122.0/24
                IPv6:
                  2001:49f0:d007::/48
                  2001:49f0:d0a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:27:9d:47:7f:b7:22:0f:20:cf:38:fc:1a:e0:12:c8:5f:
         f9:2a:6a:c9:2b:b4:fc:3b:63:13:e9:58:e7:ec:f4:1a:10:70:
         49:e7:ca:6f:a7:f3:85:d4:cd:8a:17:81:57:4c:f5:f5:86:5b:
         24:0a:3a:ce:47:a9:ea:67:48:06:b9:3b:03:62:4b:8a:d9:ed:
         ca:56:48:04:89:1a:5d:06:9f:1d:a7:41:82:b2:0e:3d:b5:1d:
         fa:81:e8:a6:5e:64:d9:ff:ce:19:13:e4:aa:d8:7d:0b:41:8a:
         2d:20:55:58:52:55:36:97:07:0e:7f:cc:70:13:7e:93:1d:14:
         3e:da:88:c2:75:1d:0d:13:e0:5c:7c:01:80:9d:72:3d:26:2e:
         14:f8:5d:4e:1d:a8:da:25:8b:62:18:1f:61:4c:42:9e:37:d4:
         3c:68:8d:08:43:89:98:fe:28:86:2b:6d:c0:31:1e:6c:81:39:
         26:55:25:65:e3:3d:90:55:cf:08:4d:57:18:68:c7:e3:1b:e7:
         bd:20:ce:0d:c3:fe:bf:c2:70:ea:4c:e3:f8:dd:3f:4b:a5:73:
         6c:e6:cc:cc:85:f1:85:a1:d5:c7:f1:7e:80:20:61:52:66:7d:
         d9:60:66:7c:55:73:76:9f:c2:60:4a:92:c4:e3:8a:1c:6e:94:
         3e:57:13:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:55 2025 by rpki-client